DutchIt is an app for splitting bills, published by Philip J. Humphrey ("we", "us"). This policy explains what we collect when you use DutchIt, why, who we share it with, and how you can delete it. If you have a question, email phil@humptech.net.
The short version
- Receipt photos are read on your phone. The photo itself is never uploaded.
- We collect what's needed to run your account, share bills, and process purchases, and nothing for advertising.
- We don't sell your data, show ads, or track you across other apps and websites.
- You can delete your account in the app at any time, or from this website.
What we collect
You can use DutchIt with an account, or as a guest without signing up. A guest account works the same way and we collect the same data from it, except that it has no email address or password. Everything below applies to both unless it says otherwise.
Your account
Guests: just the name you enter, so other people know who you are. The app keeps your guest sign-in on your phone.
With an account: your email address, username and the name you choose to show other people. Your password is stored only as a secure hash, so we can't read it. We email you one-time codes to confirm your email address, sign in when extra verification is needed, reset your password, and confirm account deletion.
Bills you split
When you scan a receipt, the camera photo is processed on your device to read the items, and it stays on your device. What we store is the bill you save: its title, date, items, prices, tax and tip, who has claimed which items, and the status of each person's payment.
Payment app usernames
If you add your username for a payment app (such as Venmo, Cash App or PayPal) so people can pay you, we store it and show it to the people on bills you share.
DutchIt doesn't handle money between people. When you tap to pay someone, we open the payment app with their username and the amount. That payment app's own privacy policy then applies.
Invite links
If you open a DutchIt invite link before you've installed the app, we record your IP address, time zone, language and type of device (Android or iPhone). We use these only to connect the link to the app once you've installed it, so you land on the bill or person you were invited to.
Purchases
Plans and credits are bought through Google Play on Android, or the App Store on iPhone. The store tells us what you bought, the order or transaction number and the purchase's status, so we can give you what you paid for and let you restore it on another device. We never see your card or bank details.
Device and app store identifiers
New users get some free credits. To check they haven't been claimed already:
- On Android, they're given once per phone. The app sends your Android device ID along with a security check from Google (Play Integrity) that confirms it's the genuine DutchIt app on a genuine device.
- On iPhone, they're given once per Apple Account. The app sends Apple's signed record of your download of DutchIt, which includes an identifier for your Apple Account's copy of the app. It isn't your Apple ID or email address.
Either way, we store only a one-way hash of the identifier, which can't be turned back into it, and use it only to prevent abuse of the free credits.
Notifications
If you allow notifications, we store your device's push notification token (from Firebase Cloud Messaging, which delivers through Apple's push notification service on iPhone) so we can tell you when, for example, someone pays you. We also keep the notifications we've shown you in the app. Guests get push notifications too, but not the in-app list.
Technical logs
Our servers keep records of requests and errors, which can include your user ID and IP address. We use them to keep DutchIt working and secure, and keep them only for a limited time.
How we use it
- To run DutchIt: your account, splitting bills, showing who owes what, notifications and purchases.
- To keep it secure and prevent fraud and abuse.
- To answer you when you contact us.
We don't use your data for advertising, sell it, or use it to build profiles of you.
Who we share it with
- People you split bills with. They see your name, the items you've claimed, whether you've paid, and any payment app usernames you've added.
- Service providers who run parts of DutchIt for us, and use your data only to do that:
- Microsoft Azure, which hosts our servers and databases in the United States.
- Google, for Google Play purchases, Play Integrity checks and Firebase Cloud Messaging push notifications.
- Apple, for App Store purchases and push notifications on iPhone.
- Mailgun, which sends our emails.
- When the law requires it, or to protect the rights and safety of our users or of Philip J. Humphrey.
Keeping and deleting your data
We keep your data while you have an account. A guest account that hasn't been used for 12 months is deleted automatically, in the same way, along with any credits left on it. If the guest allowed notifications, we send a warning 30 days before; opening the app or creating an account keeps it. An account with an email address is never deleted for inactivity. You can delete your account in the app (Account, then Delete Account), or follow the steps on our account deletion page. When you do, we delete:
- your account, email address, name and password;
- your profile and payment app usernames;
- your plans, credit balances and notification settings, notifications and push tokens.
Some records are kept without anything that identifies you:
- Bills shared with other people stay available to them, with your name removed, so their records still add up.
- Purchase records stay, no longer linked to you, so a purchase can still be restored to a new account and for our accounting.
- Credit history stays as an anonymous audit record.
- The hashed device or app store identifier stays, so deleting and recreating an account doesn't claim the free credits again.
Technical logs are deleted on their normal schedule.
Guest accounts can't be deleted directly in the app. Instead, create an account from your guest account (Account, then Log In / Create Account): your bills and purchases carry over to it. Then delete that account as described above. If you no longer have your guest sign-in, for example because you've uninstalled the app, email us with the name you used and details of the bills you were part of, and we'll find and delete the guest account where we can.
Security
Data is encrypted in transit (HTTPS). Passwords are stored only as hashes, and access to our systems is restricted.
Your choices and rights
You can see and change your name and payment app usernames in the app, and delete your account at any time. You can also email us to ask for a copy of your data, a correction or deletion. Depending on where you live, you may have other rights under local law, and we'll honor them.
Children
DutchIt isn't directed at children under 13, and we don't knowingly collect data from them. If you think a child has given us their data, email us and we'll delete it.
Changes to this policy
If we change this policy, we'll post the new version here and update the date at the top. For significant changes, we'll also tell you in the app.
Contact
Philip J. Humphrey: phil@humptech.net